Mercurial > public > sg101
view gpp/forums/views/attachments.py @ 322:c3d3d7114749
Fix #148; Django now requires AJAX posts to present the CSRF token. Added code suggested by Django docs to shoutbox.js. Since shoutbox.js is on every page, it should cover all cases.
author | Brian Neal <bgneal@gmail.com> |
---|---|
date | Sat, 12 Feb 2011 21:37:17 +0000 |
parents | 72fd300685d5 |
children |
line wrap: on
line source
""" This module contains views for working with post attachments. """ from django.http import HttpResponse from django.http import HttpResponseForbidden from django.http import HttpResponseBadRequest from django.http import HttpResponseNotFound import django.utils.simplejson as json from forums.models import Post def fetch_attachments(request): """ This view is the target of an AJAX GET request to retrieve the attachment embed data for a given forum post. """ if not request.user.is_authenticated(): return HttpResponseForbidden('Please login or register.') post_id = request.GET.get('pid') if post_id is None: return HttpResponseBadRequest('Missing post ID.') try: post = Post.objects.get(pk=post_id) except Post.DoesNotExist: return HttpResponseNotFound("That post doesn't exist.") embeds = post.attachments.all().select_related('embed') data = [{'id': embed.id, 'html': embed.html} for embed in embeds] return HttpResponse(json.dumps(data), content_type='application/json')